Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e322e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          0tQW5eUPxwadr4ASIDAdfpx7EhZBYfSIeqo9bRf6CO0=
Subject key identifier:   6B:24:C7:29:20:6C:5F:D5:3E:C0:D5:18:2C:98:D4:A2:7D:09:F9:A3
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       63A98CF432EB0756215F5CFD28AE3549B0FA6266
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa
Signing time:             Thu 03 Apr 2025 22:33:24 +0000
ROA not before:           Thu 03 Apr 2025 22:28:24 +0000
ROA not after:            Thu 02 Apr 2026 22:33:24 +0000
asID:                     53156
IP address blocks:        186.211.2.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 11:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a9:8c:f4:32:eb:07:56:21:5f:5c:fd:28:ae:35:49:b0:fa:62:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  3 22:28:24 2025 GMT
            Not After : Apr  2 22:33:24 2026 GMT
        Subject: CN=6B24C729206C5FD53EC0D5182C98D4A27D09F9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:9f:4c:a9:23:f9:6a:2e:19:fb:29:db:73:
                    7c:4d:71:4f:7c:07:b9:8f:40:01:a5:07:ff:55:5a:
                    33:4b:e5:37:b8:99:b0:8e:5b:19:0c:06:cb:7d:57:
                    9f:6d:74:9e:23:a9:8d:c2:b7:cf:dd:37:83:cb:66:
                    2e:b9:45:78:ec:d1:9a:4d:77:40:3c:e2:b2:53:9f:
                    68:ef:c1:69:1c:f8:e0:a0:7d:9e:ae:4c:92:73:21:
                    a2:e4:7e:0c:df:21:7b:26:6a:e2:73:b9:0f:a4:9d:
                    eb:71:f9:04:c2:8f:d9:04:a2:e1:a4:4c:98:1c:46:
                    7e:36:11:3f:74:8d:f4:0f:ff:58:99:70:b5:c0:6a:
                    38:09:25:98:bc:2a:26:f1:50:8f:24:d2:bd:08:06:
                    ff:93:16:0e:68:5b:3c:b1:c2:a3:0d:86:e4:58:f9:
                    8a:be:1e:ed:0a:39:f2:ba:a2:92:b7:e7:84:7b:0d:
                    0d:43:f5:a4:e7:3d:8b:9e:fc:9e:73:c6:06:1f:31:
                    23:30:7d:54:29:9c:89:b3:d8:69:75:e8:2a:61:c6:
                    29:db:1c:23:73:06:b1:30:95:ed:a2:66:02:ce:e6:
                    51:91:87:8a:7a:b2:73:58:84:74:f9:e3:75:53:79:
                    6a:e7:ff:45:ae:fb:53:a8:b4:79:29:02:42:37:4a:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:C7:29:20:6C:5F:D5:3E:C0:D5:18:2C:98:D4:A2:7D:09:F9:A3
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:f9:2b:b1:a5:e7:ee:d2:32:6f:3d:03:60:6d:ce:49:0c:
         2a:41:27:0d:bd:03:64:41:6d:85:d0:65:61:bf:54:e7:01:00:
         b0:ee:97:17:08:05:d4:3d:3c:39:a6:89:17:c3:a2:ab:7c:3c:
         19:f8:c6:be:ec:99:b8:44:d5:6d:bf:d3:8c:2a:19:c3:ee:58:
         d4:ec:ea:04:e0:a8:0b:66:0f:02:54:fa:9c:45:5e:a1:1d:b3:
         1b:8b:63:69:31:f2:46:34:ed:b1:e0:19:02:2a:ee:8c:be:bc:
         ec:27:61:f8:6c:c0:cc:af:5a:c5:6f:bb:08:d8:39:fa:d1:71:
         54:fa:f8:3f:1c:a6:57:52:6f:ac:67:b2:cf:98:c2:14:bc:80:
         98:46:fb:34:04:15:f0:e4:28:a7:f0:41:56:54:60:7a:4a:43:
         0c:6c:16:d6:95:c0:b8:bf:2e:3a:e6:55:50:90:c4:f1:4a:dc:
         50:29:7c:ff:53:e5:0f:34:34:56:7a:bf:c7:e2:a4:8a:d8:92:
         78:1b:f3:28:d0:36:5e:06:d0:4e:cf:ca:00:36:c9:b3:72:8b:
         e2:dd:aa:aa:ce:46:83:ab:b8:51:de:37:e8:40:33:f3:2d:6f:
         92:eb:4f:4a:f9:13:e5:6b:2e:dc:8d:18:b3:f2:0b:7d:26:0d:
         90:cf:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:27:13 2025 by rpki-client